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Amendments to the Title: 

Please amend the title of the application as follows: 

Method and Apparatus for Monitoring Patient Information Privacy Checking 
Amendments to the Specification: 

Please replace the abstract with the following: 

The preferred embodiments described herein provide a A method and system for 
monitoring confidential information in a medical records system is provided . The 
monitoring may occur when the data is transferred in the medical records system, such as 
inputting data into the medical records system, outputting data from the medical records 
system, displaying data on the medical records system, or saving data in the medical 
records system. The method and system for monitoring confidential information may 
extract a portion of data transferred, compare the portion of data with a predetermined 
sequence in a database, determine whether the portion of data comprises patient 
information based on the comparison, and modify the portion of data if it comprises patient 
information. Extracting a portion of data may comprise parsing the data or may comprise 
reading a structured form. Further, comparing the portion of data with a predetermined 
sequence may comprise comparing the portion of data with a predetermined format. 
Alternatively, comparing the portion of data the portion of data with a predetermined 
sequence in a database and determining whether the portion of data comprises patient 
information may comprise using rules (such as an expert system) to specify a sequence of 
characters that includes patient information. Moreover, modifying the portion of data if it 
comprises patient information may comprise manual or automatic modification. 

Please replace paragraph [0025] with the following paragraph: 

[0025] The operator may request privacy checking in the report, such as a PHI check in the 
report, as shown at block 104. Privacy checking, such as PHI checking, may be initiated, as 
shown at block 106. The privacy checking may determine whether there is a potential 
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violation of privacy, as shown at block 108. Block 108 is discussed in more detail in FIG. 3. 
If there is a potential violation, the operator may be notified of the potential violation, as 
shown at block 110. The privacy checking may suggest a single solution or suggest 
multiple solutions to the operato r, as shown at block 112 . The solutions may be previously 
input by the operator. For example, the operator prior to transferring the data may 
previously suggest the solution. Alternatively, the operator may suggest the solution after 
transferring of the data, but prior to requesting privacy checking. 
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